Onderwerp: Latest wu-ftpd exploit :-s

http://www.frsirt.com/exploits/08.11...advanced.c.php

This exploit is NOT new at all because it has been known since 3 years now.

Regards

Marco aka Yog-Sotho






Mark Heiligen
<mark.heiligen@gm
x.at> To
bugtraq@securityfocus.com,
13/02/2006 09.41 full-disclosure@lists.grok.org.uk
cc

Subject
Latest wu-ftpd exploit :-s










http://www.frsirt.com/exploits/08.11...advanced.c.php

----- Original Message -----=20
From: "Mark Heiligen" <mark.heiligen@gmx.at>
To: <bugtraq@securityfocus.com>; <full-disclosure@lists.grok.org.uk>
Sent: Monday, February 13, 2006 3:41 AM
Subject: Latest wu-ftpd exploit :-s


> http://www.frsirt.com/exploits/08.11...advanced.c.php
>=20

Isn't this a three year old exploit? Is this news? CVE-2003-0466.

Upgrades for wu-ftpd have been available from the various vendors for =
just as long.

FWIW, I compiled and ran this against an old wu-ftpd server here and =
found it was not exploitable.

Ragnar Paulson
The Software Group Limited